<object classid="1" onerror="alert('err')"></object>